CVE-2008-4543 Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of...
HighCVSS 7.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unity | <= 4.2\(1\) | No fix listed |
| cisco unity | <= 5.0\(1\) | No fix listed |
| cisco unity | <= 7.0\(2\) | No fix listed |
| cisco unity | = 4.0 | No fix listed |
| cisco unity | = 4.0(1) | No fix listed |
| cisco unity | = 4.0(2) | No fix listed |
| cisco unity | = 4.0(3) | No fix listed |
| cisco unity | = 4.0(3)-sr2 | No fix listed |
| cisco unity | = 4.0(4) | No fix listed |
| cisco unity | = 4.0(4)-sr1 | No fix listed |
| cisco unity | = 4.0(5) | No fix listed |
| cisco unity | = 4.1(1) | No fix listed |
| cisco unity | = 5.0 | No fix listed |
| cisco unity | = 7.0 | No fix listed |
References
- 32187 third-party-advisory vendor-advisory
- 1021013 vdb-entry
- 20081008 VoIPshield Reported Vulnerabilities in Cisco Unity Server vendor-advisory
- 31642 vdb-entry
- www.voipshield.com
- ADV-2008-2771 vdb-entry
- cisco-unityserver-session-handling-dos(45743) vdb-entry